Legal
Privacy Policy
This explains exactly what MEWAI collects, who processes it, how long it is kept, and how to delete it. It describes what the app actually does — not what we would like it to do.
The short version
- Your scan photos are uploaded to our server when you have an account, so your report keeps its photo and your progress can be compared over time. They are stored privately and are never public.
- Scan photos are automatically deleted after 90 days.
- We never sell your data, and we never use your photos for advertising.
- Deleting your account erases your photos and reports from our servers.
What we collect
Your account
If you create an account, we store your email address. If you sign in with Apple or Google instead, we receive the identifier and email they release to us. Passwords are stored hashed by our authentication provider and are never visible to us.
Your scan photos
When you take a scan, the photo is sent to Face++ for facial landmark measurement. If you are signed in, the photo is then uploaded to our storage and linked to your report, so the app can show it beside your score and compare your progress week to week.
These photos are stored in a private area that only your account can read. They are not public, not shared with other users, and not used for advertising or for training any model. They are deleted automatically once they are 90 days old, and immediately if you delete your account.
If you use the app without an account, the scan runs and the photo is measured, but no photo or report is saved to our servers. When you later create an account, the most recent scan you made is carried over to it — photo included.
Your reports and routine
For each scan we store the resulting score, the individual measurements, and the text of the routine written for you, along with the date. We also store your daily task progress so the app can pick up where you left off.
The AI coach
Messages you send the in-app coach are forwarded to Anthropic's Claude API to generate a reply, together with the measurements from your most recent scan so the answer fits your situation. We keep a count of your daily coach usage so we can apply plan limits.
Subscriptions
Purchases are processed by Apple or Google — we never receive your card details. We store whether your subscription is active, which plan it is, and your remaining token balance.
Technical data
We collect app usage events (which screens are opened, which features are used) and crash reports containing your device model and operating system version. These never include your photos or the contents of your reports.
Who processes your data
We use the following providers. Each one only receives what it needs to do its job.
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Hosting, database, file storage and sign-in | Your email address, your scan photos, and your reports. |
| Face++ (Megvii) | Facial landmark detection | Your scan photo, sent for measurement when a scan runs. |
| Anthropic (Claude) | Writes your routine and answers the in-app coach | The measurements from your scan and the messages you send the coach. Anthropic does not train its models on this. |
| RevenueCat | Manages subscriptions and restores purchases | A subscription identifier and your purchase status. Never your photos. |
| PostHog | Product analytics — which screens are used | App events and a device identifier. Never your photos or report content. |
| Sentry | Crash reporting | Technical error details, device model and OS version. |
| Apple / Google | App distribution and payment processing | Payment is handled entirely by the store. We never see your card details. |
We never sell your personal data, and we never share your photos or reports with anyone beyond the providers listed above.
How long we keep things
- Scan photos — deleted automatically 90 days after the scan.
- Reports, scores and routine history — kept while your account exists, so you can see your progress over time.
- Account details — kept until you delete your account.
Deleting your data
You can delete your account from inside the app, under Settings. Deletion is immediate and permanent. It removes your scan photos from storage, along with your reports, daily tasks, coach usage history, token balance, subscription record, profile and login.
Deleting your account does not cancel your subscription — that is managed by Apple or Google, and must be cancelled in your device's store settings.
If you cannot access the app, email [email protected] from the address on the account and we will delete it for you.
Your rights
Depending on where you live, you may have the right to access the data we hold about you, correct it, delete it, export it, or object to how we use it. Residents of the EU and UK have these rights under the GDPR; residents of California have comparable rights under the CCPA, including the right not to be discriminated against for exercising them.
To exercise any of these, email [email protected]. We will respond within 30 days.
Children
MEWAI is not intended for anyone under 13, and we do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.
Where your data is held
Our servers and the providers above operate in the United States. If you use MEWAI from elsewhere, your data is transferred there and handled under this policy.
Security
Data is encrypted in transit. Scan photos sit behind per-account access rules, so one account cannot read another's files. No system is perfectly secure, and we do not claim otherwise — but we do not keep anything we do not need, which is why photos are cleared after 90 days.
Changes to this policy
If we change what the app collects, this page changes with it and the date at the top is updated. Material changes will be announced in the app.
Contact
[email protected]
Liran Yaish, developer of MEWAI: Face Yoga & Gua Sha